Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 3 replies
  • Subscribers 3 subscribers
  • Views 1032 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SG220 UTM9 Country blocking not blocking port 4444

Yan Benoist

Hello,

I'm a newbie in the Sophos community and apologize if my question has already been answered somewhere.

I've activated the Country blocking on our SG210 UTM9 v 9-705.3 appliance and was quite happy to check that the box no more accepted incoming requests (https redirection essentially) coming from countries where we don't have users.
From a PC i created a VPN tunnel to a blocked country, tried an access to one application behind the firewall and got no response, as awaited.
I also used Nmap to check,but discovered that with an "Nmap -Pn" port 4444 was found and, indeed, an https allowed me to login on the firewall.
I hoped the Country blocking would close all ports and make the firewall totally unseen from these countries.
Wrong understanding or bad configuration ?

Thanks in advance for your help.

Yan



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi Yan, Thanks for reaching out to Sophos Community.

    You can allow specific networks to access UTM's WebAdmin by creating network/host definitions and allowing them in "Management > WebAdmin Settings > Allowed Networks"

  • 0 in reply to FormerMember

    Hi Devesh,

    Thanks for your fast answer  and tip. I'll try that... but just realize that country blocking applies to ALL traffic (in and outnound). So it has a huge impact and i'll have to be very carefull.
    Anyway, thanks for your help, i see now where to limit port 4444 access.

    Have a nice day, Devesh,

    Regards,

    Yan

Reply
  • 0 in reply to FormerMember

    Hi Devesh,

    Thanks for your fast answer  and tip. I'll try that... but just realize that country blocking applies to ALL traffic (in and outnound). So it has a huge impact and i'll have to be very carefull.
    Anyway, thanks for your help, i see now where to limit port 4444 access.

    Have a nice day, Devesh,

    Regards,

    Yan

Children
Unfiltered HTML